You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

BC AdBot (Login to Remove)

Hello there and welcome to BleepingComputer. My name is Charles and I will be dealing with your log today. Please print off a copy of these instructions, and also save them to a Notepad file on your desktop, so they are easily accessible. We are going to boot into Safe Mode later in the fix, and there is no internet access.

You have Weatherbug installed. This is very much an ad-enabled application, which in addition to providing current outdoor temperature information in the System Tray together with real-time weather alerts, can also draw unwanted ads and popups to your computer.My recommendation is that you uninstall it from your computer.If you want a program which provides weather information, there is an ad-free alternative to Weatherbug called WeatherWatcher which is available free from here: http://www.snapfiles.com/get/weatherwatcher.html.I suggest you remove it from Add/Remove via the Control Panel.

Please download SmitfraudFix (by S!Ri)Open the file and it will extract the contents (a folder named SmitfraudFix) to your Desktop.

Now, please reboot your computer into Safe Mode. This is done by rebooting Windows and pressing F8 at boot/Windows startup, usually right after the beep. Then select Safe Mode from the list.

Once in Safe Mode, open the SmitfraudFix folder again. Double-click smitfraudfix.cmd.Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.The report can also be found at the root of the system drive, usually at C:\rapport.txtWarning : running option #2 on a non infected computer will remove your Desktop background.

Please include rapport.txt, along with a new HijackThis log in your next reply.Thanks,Charles

If you are pleased with the service I have offered, you may like to consider making a donation.

Please run Panda's ActiveScan. Once you are on the Panda site click the Scan your PC buttonA new window will open, click the Check Now button.Enter your personal details.Click the big Scan Now button.It will ask to install various content - please allow this.It will start downloading the files it requires for the scan, which may take a while.When download is complete, click on Local Disks to start the scan.When the scan completes, click the See Report button.Click Save Report and save the file to your Desktop, so you can post this log in your next reply.Thanks,Charles

If you are pleased with the service I have offered, you may like to consider making a donation.